Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: 6Oc916k4lxK7D5LD677Ee+IMmHob65oYgZp1j5seJhs=
Subject key identifier: 3A:6E:D5:30:81:F0:47:C3:1E:9A:BC:1B:96:4E:1E:C1:E0:20:5F:D9
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019CADFE41551A1C57077051FB6717F4DAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0EC3
Signing time: Mon 02 Mar 2026 10:00:47 +0000
Manifest this update: Mon 02 Mar 2026 10:00:47 +0000
Manifest next update: Tue 03 Mar 2026 10:00:47 +0000
Files and hashes: 1: BcEnhr3TM-NXG8Q4ay62cxztpy4.roa (hash: pqYAoj6DHioE/63Z2p/ewbVxl274tw4E0vVzLjsfmyg=)
2: DCrG4g3sJo2PisD_hc4NckgDZw8.roa (hash: FifxalB73pfyrHIphM4RguBQlmOIeI0ZS9qLf/+J8cI=)
3: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: FAV5jbWyqpJOB56CvvHjYBUzA9SCz3SV9J+ebin70yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:41:55:1a:1c:57:07:70:51:fb:67:17:f4:da:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Mar 2 10:00:47 2026 GMT
Not After : Mar 3 10:00:47 2026 GMT
Subject: CN=3a6ed53081f047c31e9abc1b964e1ec1e0205fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:d2:28:c0:aa:b5:a1:51:ab:01:86:7f:c6:
ed:81:19:27:81:14:93:33:3a:8c:e1:63:2d:7d:20:
a6:00:8f:34:d3:cc:c0:2e:f9:b8:41:f2:c3:22:c8:
fa:c8:eb:50:48:87:66:97:be:1b:20:35:ba:f4:cd:
3a:99:0f:73:94:59:30:1e:cf:6d:a2:cf:73:b8:38:
c7:1c:ee:f1:a8:e8:ab:e4:e6:b6:e8:d6:44:14:33:
68:79:66:8c:03:de:5e:de:3f:d7:60:de:b0:6f:22:
15:98:0b:ba:ff:7c:74:54:71:c6:83:d4:3b:94:c4:
f6:cb:72:2a:f1:4c:61:c6:56:d9:10:12:c6:15:aa:
be:4a:73:09:4f:21:ed:8a:9e:56:23:01:5a:ce:e2:
a7:12:27:38:fc:63:35:b0:da:b8:c6:50:ac:ac:0b:
26:40:ec:9c:61:2a:4f:59:8b:59:42:f1:0d:4d:c4:
2f:62:0f:e9:88:2e:91:d9:be:b9:49:ee:82:c6:5a:
69:ce:22:d0:27:d4:d4:af:4b:e2:6f:e4:1c:43:6e:
2f:4a:dc:77:62:d3:23:0f:8d:57:16:28:66:54:b6:
92:0d:58:41:fd:37:0c:3a:9a:e0:5b:aa:bc:58:aa:
6f:75:fd:14:15:11:ad:e1:b8:05:09:6c:10:e8:78:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6E:D5:30:81:F0:47:C3:1E:9A:BC:1B:96:4E:1E:C1:E0:20:5F:D9
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e3:d5:5d:b2:d6:63:2c:e3:ca:21:1f:f0:31:18:d9:8e:a3:
42:d3:82:04:9e:b2:b0:ed:42:ba:4d:a7:3a:81:2b:08:6c:a7:
49:8e:17:28:05:f4:79:61:5b:c0:ac:04:5f:a8:b6:19:2e:cc:
ff:c9:6c:f1:05:0b:0f:3f:60:39:37:81:a9:7f:f3:d3:78:66:
54:77:73:92:51:e6:03:88:2d:86:60:af:09:f5:d9:21:55:07:
f2:f8:de:c9:2f:85:19:f9:b7:e8:d5:af:96:26:50:71:9c:6c:
10:bb:ba:9c:50:b2:7f:72:2b:0b:17:48:37:3a:58:6e:c9:42:
d7:e1:f0:00:df:b7:9f:14:a0:e0:2d:11:ad:8e:58:ff:41:17:
88:a9:f8:51:2e:d3:80:af:4f:7a:59:77:87:b3:d0:12:d4:ab:
30:58:ba:c5:1b:73:15:9e:03:7f:18:6a:8b:18:e4:b0:8a:61:
fc:e8:04:d2:61:58:44:fa:d2:15:c9:b0:3a:53:1b:9c:17:df:
06:8d:57:e2:24:61:20:48:69:e1:c2:4f:63:cb:02:b2:b0:b5:
6d:4a:20:fe:4c:64:98:6c:f5:a3:b0:4f:b8:d5:9e:2e:b8:89:
06:07:92:aa:17:8b:04:4b:73:d3:6d:7d:4c:f8:7e:e8:83:6f:
ed:d6:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:31 2026 by rpki-client